While there are many reasons for the regulated community to be concerned about these and other recent changes to HIPAA regulations, some of the more compelling reasons include: Covered entities must notify affected ??? individuals, such as patients and customers, in the event of a security breach affecting unsecured protected health information; notification also must be made to the primary regula